Looking for traffic analysis/monitoring tool

Discussion in 'Linux Networking' started by KR, Apr 8, 2006.

  1. KR

    KR Guest

    I've just installed RRDTool/Cacti on a server and set it up to fetch
    interface statistics (via SNMP) from a Linux-based router, and what can
    I say; it rocks. However, the available SNMP statistics are a bit limited.

    I'd like to see how much traffic is coming from and going to the
    different subnets behind the router. I see that Cacti can use scripts to
    collect data, and that packets can be classified and counted with
    user-defined chains in iptables, but Cacti is not (and can't be)
    installed on the router itself.

    What is the best way to collect the data, and how do I get it to Cacti?
    (Or am I using the wrong tool for the job?)
     
    KR, Apr 8, 2006
    #1
    1. Advertisements

  2. KR

    hakim.st Guest

    iftop
    sniffit
    ntop
    ethereal

    bye...
     
    hakim.st, Apr 8, 2006
    #2
    1. Advertisements

  3. While those things can be done with mrtg/rrdtool, it'd be a hell
    lot easier if you just run ntop (www.ntop.org) in webmode for
    colorful pictures.

    Good luck
     
    Michael Heiming, Apr 8, 2006
    #3
  4. KR

    KR Guest

    As far as I can see, none those can do what I asked. But thanks anyway.
     
    KR, Apr 8, 2006
    #4
  5. KR

    KR Guest

    I'm a little short on CPU on the router; it has 26 interfaces and
    already runs a caching DNS server. But you're right, ntop does display
    some really nice graphs.
     
    KR, Apr 8, 2006
    #5
  6. KR

    sal paradise Guest

    sal paradise, Apr 8, 2006
    #6
  7. KR

    sal paradise Guest

    sal paradise, Apr 8, 2006
    #7
  8. KR

    KR Guest

    I've had a quick look at the links, and NetFlow seems to be just what
    I'm looking for. To my surprise, I also learned that lots of network
    equipment (including Cisco routers) can export NetFlow data.
     
    KR, Apr 9, 2006
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.